An issue was discovered in MantisBT through 2.24.3
published February 22, 2021
CVSS
—
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.0th percentile
Published
2021-02-22T02:23Z
EPSS history
Timeline
22 FEB 02:23Z
An issue was discovered in MantisBT through 2.24.3